The invention relates to an industrial
control network-oriented quantitative evaluation method and
system for influence of a multi-mode
attack mode on a state of an
industrial control system, and the method comprises the following steps: (1) carrying out the preliminary description and extraction of a state feature, i.e., a state
data set of the
industrial control system, and obtaining a state data segmentation point; (2) clustering the state features; (3) constructing a
state transition probability graph; and (4) carrying out quantitative evaluation on the influence of the
system state based on the abnormal characteristics and the damage degree index. According to the method and
system, for various industrial
control network attack strategies, the state abnormal characteristics are taken as main indexes, the actual state change of the system in the
attack proceeding stage and the attack ending stage is quantitatively evaluated, and the problem that the influence of various attack strategies on the system state is difficult to accurately evaluate is solved. According to the method and system, a formula for evaluating the influence of the
attack strategy on the system state is provided, state abnormal characteristics and
threat damage degrees are associated, evaluated and analyzed, and an
evaluation result consistent with the actual state influence is obtained.